phone-link-samsung-control
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes screenshots of an external device's UI, which could be used to inject instructions.\n
- Ingestion points:
sky.get_window_statecaptures the phone screen inSKILL.md.\n - Boundary markers: Instructions recommend
include_text: falseto avoid exposing private content or instructions.\n - Capability inventory:
sky.dragandsky.activate_windoware used inSKILL.mdto interact with the phone.\n - Sanitization: Disabling text extraction reduces the risk of the agent following instructions visible on the phone screen.\n- [DYNAMIC_EXECUTION]: The skill initializes its runtime by dynamically importing the
@oai/skymodule.\n - Evidence:
await import(\"@oai/sky\")inSKILL.md.\n - Context: This is a standard initialization pattern for official computer-use tools.
Audit Metadata